Finastra (London-based fintech serving 45 of the world’s top 50 banks and 8,100+ financial institutions in 130 countries) had its SFTP platform accessed between 31 October and 8 November 2024. Threat actor ‘abyss0’ claimed 400 GB of compressed data on BreachForums. The SFTP was used to share files with bank customers, raising concerns about sensitive financial institution data. No malware was deployed; customer files were not altered. Finastra only began customer notifications on 12 February 2025.